This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
DB:ORACLE:ROLLBACKWORKSPACE
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
DB
|
Keywords |
Oracle Database Server LT.ROLLBACKWORKSPACE SQL Injection
|
Release Date |
2011/12/21
|
Update Number |
2051
|
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
DB: Oracle Database Server LT.ROLLBACKWORKSPACE SQL Injection
This signature detects attempts to exploit a known vulnerability in the Oracle Database Server. It is due to insufficient validation of user-supplied input. An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
Extended Description
Oracle has released the April 2009 critical patch update that addresses 43 vulnerabilities affecting the following software:
Oracle Database
Oracle Audit Vault
Oracle Application Server
Oracle Outside In SDK HTML Export
Oracle XML Publisher
Oracle BI Publisher
Oracle E-Business Suite
PeopleSoft Enterprise PeopleTools
PeopleSoft Enterprise HRMS
Oracle WebLogic Server (formerly BEA WebLogic Server)
Oracle Data Service Integrator
Oracle AquaLogic Data Services Platform
Oracle JRockit
Affected Products
- Bea_systems weblogic_portal 8.1.0
- Bea_systems weblogic_portal 8.1.0 SP1
- Bea_systems weblogic_portal 8.1.0 SP2
- Bea_systems weblogic_portal 8.1.0 SP3
- Bea_systems weblogic_portal 8.1.0 SP4
- Bea_systems weblogic_portal 8.1.0 SP5
- Bea_systems weblogic_portal 8.1.0 SP6
- Bea_systems weblogic_server 10.0
- Bea_systems weblogic_server 10.0 MP1
- Bea_systems weblogic_server 10.3
- Bea_systems weblogic_server 7.0.0
- Bea_systems weblogic_server 7.0.0 .0.1
- Bea_systems weblogic_server 7.0.0 .0.1 SP 1
- Bea_systems weblogic_server 7.0.0 .0.1 SP 2
- Bea_systems weblogic_server 7.0.0 .0.1 SP 3
- Bea_systems weblogic_server 7.0.0 .0.1 SP 4
- Bea_systems weblogic_server 7.0.0 SP 1
- Bea_systems weblogic_server 7.0.0 SP 2
- Bea_systems weblogic_server 7.0.0 SP 3
- Bea_systems weblogic_server 7.0.0 SP 4
- Bea_systems weblogic_server 7.0.0 SP 5
- Bea_systems weblogic_server 7.0.0 SP 6
- Bea_systems weblogic_server 7.0.0 SP 7
- Bea_systems weblogic_server 7.0 SP7
- Bea_systems weblogic_server 8.1.0
- Bea_systems weblogic_server 8.1.0 SP 1
- Bea_systems weblogic_server 8.1.0 SP 2
- Bea_systems weblogic_server 8.1.0 SP 3
- Bea_systems weblogic_server 8.1.0 SP 4
- Bea_systems weblogic_server 8.1.0 SP 5
- Bea_systems weblogic_server 8.1.0 SP 6
- Bea_systems weblogic_server 9.0
- Bea_systems weblogic_server 9.1
- Bea_systems weblogic_server 9.2
- Bea_systems weblogic_server 9.2 Maintenance Pack 3
- Oracle aqualogic_data_services_platform 3.0
- Oracle aqualogic_data_services_platform 3.0.1
- Oracle aqualogic_data_services_platform 3.2
- Oracle audit_vault 10.2.3
- Oracle bi_publisher 10.1.3.3.0
- Oracle bi_publisher 10.1.3.3.1
- Oracle bi_publisher 10.1.3.3.2
- Oracle bi_publisher 10.1.3.3.3
- Oracle bi_publisher 10.1.3.4
- Oracle data_service_integrator 10.3.0
- Oracle e-business_suite_11i 11.5.10.2
- Oracle e-business_suite_12 12.0.6
- Oracle jrockit R27.1.0
- Oracle jrockit R27.6.0
- Oracle jrockit R27.6.2
- Oracle oracle10g_application_server 10.1.2
- Oracle oracle10g_application_server 10.1.2.3.0
- Oracle oracle10g_enterprise_edition 10.1.0 .5
- Oracle oracle10g_enterprise_edition 10.2.0 .3
- Oracle oracle10g_enterprise_edition 10.2.0.4
- Oracle oracle10g_personal_edition 10.1.0.5
- Oracle oracle10g_personal_edition 10.2.0 .3
- Oracle oracle10g_personal_edition 10.2.0.4
- Oracle oracle10g_standard_edition 10.1.0 .5
- Oracle oracle10g_standard_edition 10.2.0 .3
- Oracle oracle10g_standard_edition 10.2.0.4
- Oracle oracle11g_enterprise_edition 11.1.0 6
- Oracle oracle11g_enterprise_edition 11.1.0.7
- Oracle oracle11g_standard_edition 11.1.0 6
- Oracle oracle11g_standard_edition_one 11.1.0 6
- Oracle oracle9i_enterprise_edition 9.2.0.8.0
- Oracle oracle9i_enterprise_edition 9.2.0 .8DV
- Oracle oracle9i_personal_edition 9.2.0 .8
- Oracle oracle9i_personal_edition 9.2.0 .8DV
- Oracle oracle9i_standard_edition 9.2.0.8
- Oracle oracle9i_standard_edition 9.2.0 .8DV
- Oracle outside_in_sdk_html_export 8.2.2
- Oracle outside_in_sdk_html_export 8.3.0
- Oracle peoplesoft_enterprise_hrms 8.9
- Oracle peoplesoft_enterprise_hrms 9.0
- Oracle peoplesoft_enterprise_peopletools 8.49
- Oracle weblogic_server 10.3
- Oracle xml_publisher 10.1.3.2
- Oracle xml_publisher 10.1.3.2.1
- Oracle xml_publisher 5.6.2
References